GHSA-PQ2Q-RCW4-3HR6 vulnerabilities

Vulnerabilities for packages: k3s...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubevela, ksops, calico, jaeger-operator-fips, elastic-agent, tfsec, ory-kratos, gitaly, buildkitd-fips, teleport, docker-compose, ceph-csi-operator, grafana-beyla, kubernetes-csi-external-snapshotter, kubernetes-csi-external-attacher,...

GHSA-W4GW-W5JQ-G9JH vulnerabilities

Vulnerabilities for packages: gitness, gitlab-rails-ce, gendesk, terraform, rke2-runtime, rke2-runtime-fips, k3s, fuse-overlayfs-snapshotter, etcd, aws-load-balancer-controller, localstack, runc, cilium-envoy-fips, cilium-envoy, wuzz, backup-restore-operator, nvidia-gpu-operator-validator,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: grafana-alloy, nvidia-container-toolkit, sriov-network-device-plugin, podman, falco-no-driver, k3s, buildah, node-feature-discovery, kubernetes...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: grafana-alloy, nvidia-container-toolkit, sriov-network-device-plugin, podman, falco-no-driver, k3s, buildah, node-feature-discovery, kubernetes...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: grafana-alloy, nvidia-container-toolkit, sriov-network-device-plugin, podman, falco-no-driver, k3s, buildah, node-feature-discovery, kubernetes...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, rke2-runtime, k3s, rancher-agent, eks-distro-fips, node-feature-discovery, node-feature-discovery-fips, podman, eks-distro, nvidia-container-toolkit, kubernetes, grafana-alloy-fips, kubernetes-fips, azure-container-networking,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, rke2-runtime, k3s, rancher-agent, eks-distro-fips, node-feature-discovery, node-feature-discovery-fips, podman, eks-distro, nvidia-container-toolkit, kubernetes, grafana-alloy-fips, kubernetes-fips, azure-container-networking,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, rke2-runtime, k3s, rancher-agent, virt-launcher, eks-distro-fips, node-feature-discovery, node-feature-discovery-fips, podman, eks-distro, nvidia-container-toolkit, kubernetes, grafana-alloy-fips, virt-handler, kubernetes-fips,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, rke2-runtime, k3s, rancher-agent, virt-launcher, eks-distro-fips, node-feature-discovery, node-feature-discovery-fips, podman, eks-distro, nvidia-container-toolkit, kubernetes, grafana-alloy-fips, virt-handler, kubernetes-fips,...

EUVD-2021-18871

Malware in sbrugna...

EUVD-2025-12401

Malicious code in bioql PyPI...

EUVD-2023-2541

Malicious code in bioql PyPI...

EUVD-2023-2553

Malicious code in bioql PyPI...

Malicious code in xray-k3s-project (npm)

The package xray-k3s-project was found to contain malicious code...

MAL-2025-39951 Malicious code in xray-k3s-project (npm)

The package xray-k3s-project was found to contain malicious code...

Running Serverless Wasm Functions on the Edge with k3s and SpinKube

...

CVE-2025-49140 vulnerabilities

Vulnerabilities for packages: k3s...

GHSA-F26W-GH5M-QQ77 vulnerabilities

Vulnerabilities for packages: k3s...

CVE-2023-32187

An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/supervisor port TCP 6443 cause denial of service. This issue affects k3s: from v1.24.0 before v1.24.17+k3s1, from v1.25.0 before v1.25.13+k3s1, from v1.26.0...